Security · High impact
A thousand fewer paths to root
OpenAI built an autonomous pipeline that found, validated, and generated patches for 948 local privilege-escalation vulnerabilities in the Linux kernel.
OpenAI News · · 3 sources · 💬 353
The Morning Dev: developer news from Wednesday, November 4, 2026
Security · High impact
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. The attacker's code then runs as root, according to advisories that Debian, Ubuntu, and APT's developers published on November 4…
The Hacker News · info@thehackernews.com (The Hacker News) · · 2 sources · 💬 78
Security · High impact
Hackers exploited iOS and Android flaws to infect phones
Hackers possibly linked to the Kremlin exploited previously patched iOS and Android flaws in an attempt to hack visitors of multiple websites, including one celebrating the 250th anniversary of American independence, researchers said Wednesday. The attackers, which the…
Biz & IT - Ars Technica · Dan Goodin · · 3 sources
Security · High impact
Zyxel fixes zero-day exploited to hack nearly 1,000 network switches
Zyxel has patched a zero-day vulnerability in its GS1900 series network switches that hackers exploited to compromise nearly 1,000 devices worldwide and steal configuration files and credentials. [...]
BleepingComputer · Lawrence Abrams · · 3 sources
Security · High impact
APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits
The Russia-linked threat actor known as APT29 is presumed to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Ukrainian web analytics service called Plerdy SEO Tracker…
The Hacker News · info@thehackernews.com (The Hacker News) · · 3 sources
Security ›
Security · High impact
More Asian airlines announce data breaches after attack on Spanish IT provider Amadeus
Japan Airlines, Cathay Pacific, Korean Air, Asiana Airlines, Singapore Airlines and Malaysia Airlines have all come forward over the last week to report data breaches traced back to Amadeus IT Group — a company that builds and maintains platforms for flight reservation, ticketing…
The Record from Recorded Future News · · 2 sources
Security · High impact
DreamHost confirms data breach exposed FTP logins and webmail sessions
DreamHost is warning of a data breach after attackers gained access to its File Manager platform for two months and stole customers' FTP/SFTP usernames and passwords. [...]
BleepingComputer · Bill Toulas · · 2 sources
Security · High impact
Barracuda ESG Authentication Bypass Flaw Opens Path to Root
An authentication bypass and a command injection flaw can be chained for root access on Barracuda’s Email Security Gateway appliances. The post Barracuda ESG Authentication Bypass Flaw Opens Path to Root appeared first on SecurityWeek .
SecurityWeek · Eduard Kovacs · · 2 sources
Listen · new today
On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Ciaran Martin, former CEO of the UK’s National Cyber Security Centre (NCSC), to talk through the week’s cybersecurity news, including: The $6.3 billion dollar Binance hack turned out to be pretty clunky, but it ain’t dumb if it works we guess Meanwhile Brazil’s Mercado Bitcoin loses “millions”. Cute! A bit late to make the Word of the Year shortlist, but Google’s coined a new term with “LLMjacking” An infosec guy’s clankers hacked another infosec guy, everyone’s arguing about it, it’s funny Much, much more! This week’s show is brought to you by runZero. VP of Security Research Tod Beardsley joins Patrick Gr
AI ›
OpenAI to acquire Pierre Computer Company, Inc.
OpenAI will acquire Pierre Computer Company, expanding Codex’s tools for building, understanding, and reviewing code.
OpenAI News · · 💬 87
Listen · new today
Watch the full show on YouTube: https://www.youtube.com/watch?v=QmDLDy3ZSNE
Industry ›
VMware releases vSphere Express for virtualization on up to 128 cores
After alienating many long-time small- to medium-sized business (SMB) customers, Broadcom’s VMware is trying to appeal to its smaller customers. Today, the virtualization company announced vSphere Express, a lower-end virtualization offering for organizations that require…
Biz & IT - Ars Technica · Scharon Harding ·
Watch · new today
Tools & Launches ›
Release
Visual Studio Code 1.145
Learn what's new in Visual Studio Code 1.145 Read the full article
Visual Studio Code - Code Editing. Redefined. · Visual Studio Code Team ·
Cloud & DevOps ›
Release
[$] Plasma X11 session removal surprises some Fedora users
The KDE Project announced, in 2025, that Plasma 6.7 would be the last version of the desktop environment that would support X11 sessions. Those who keep up with KDE's announcements no doubt expected it when Plasma 6.8 dropped X11 support as promised. What seems to have come as a…
LWN.net · jzb ·
GitHub Copilot is now available in Xcode’s coding assistant
You can now work with GitHub Copilot directly in Xcode’s built-in coding assistant , bringing Copilot into your native Xcode workflow. The integration is now in public preview, available starting with Xcode 27.3 beta. This gives you another way to use Copilot in Xcode. The…
Archive: 2026 - GitHub Changelog · Allison ·
A developer opened Postman. Then two AI coding agents changed without their permission.
A developer says Postman’s desktop app installed plugins into Claude Code and OpenAI Codex without their permission. The app also tried to approve its own startup hook, which tells Codex to use Postman’s tools for API development tasks. The developer, known as “indicava” on…
The New Stack · Amanda Caswell ·
Listen · new today
This is a guest conversation episode of Ship It Weekly , separate from the weekly news recaps. In this Ship It Conversations episode, I talk with Davlet Dzhakishev about what it takes to let AI agents work on your cloud infrastructure, why guardrails belong in the architecture and not the prompt, and what running your own agents really costs. Davlet is the CEO and co-founder of Cloudgeni, which builds AI agents for cloud infrastructure. He got into this after working through SOC 2 and ISO 27001 compliance prep mostly by hand, and asking what agents would need to fix those problems reliably without making things worse. We start with the incident that changed how Cloudgeni builds. An agent hit
Backend ›
Security
Wednesday, November 11, 2026 Security Releases
Node.js Blog ·
Listen · new today
Dr Andrew Tridgell of the Ardupilot project discusses flight control software for autonomous and remote controlled aircraft. This field has advanced considerably in recent years, and autonomous vehicles are playing an increasingly important role in many industries -- from package delivery to scientific surveying and film-making -- as well as in the consumer market. Host Jason Davey speaks with Tridgell about the fundamental concepts required to keep a drone in the air, the hardware and software architecture behind these vehicles, and how development and testing are handled in Ardupilot, one of the leading open source flight control software stacks.